Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/EZMLfTgK5Ip7YbjhFLB3GrMaGkE.roa
File: EZMLfTgK5Ip7YbjhFLB3GrMaGkE.roa (raw, json)
Hash identifier: Xt6MGKwoXbcHeXkpFqs4qHXdYRPX9sVOAA5i8aBPg/A=
Subject key identifier: 11:93:0B:7D:38:0A:E4:8A:7B:61:B8:E1:14:B0:77:1A:B3:1A:1A:41
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 018CC3B6748C8EB4DB93ACD477FF6F389698
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/EZMLfTgK5Ip7YbjhFLB3GrMaGkE.roa
Signing time: Mon 01 Jan 2024 06:29:23 +0000
ROA not before: Mon 01 Jan 2024 06:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29633
IP address blocks: 217.75.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:74:8c:8e:b4:db:93:ac:d4:77:ff:6f:38:96:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Jan 1 06:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11930b7d380ae48a7b61b8e114b0771ab31a1a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:a8:ee:10:54:0c:38:42:bd:94:00:d0:31:
83:0b:9a:32:f6:01:12:7d:38:30:e7:a0:c0:ee:d3:
f1:35:fa:18:29:9c:3d:c6:c4:1b:f2:7e:5d:5f:62:
23:5a:34:87:7f:6e:28:0c:e3:41:0d:27:f5:88:e7:
de:12:8b:8c:ae:64:7e:66:22:83:15:55:82:60:e6:
07:93:5c:d6:a4:5b:13:7f:39:bd:38:ae:2e:50:6a:
fe:89:ef:6e:b1:9f:f2:b7:1e:a3:2e:b5:e2:55:2c:
0e:6e:12:c4:42:cb:57:04:39:9a:ef:7a:62:d4:e7:
c7:ea:32:c1:18:07:6d:44:3d:22:83:d9:40:7a:14:
28:19:92:25:7f:94:9b:4e:76:0d:ef:f9:c8:0c:37:
1d:c1:67:79:4e:69:a8:ba:71:8c:03:87:a8:fb:e6:
5a:13:e9:54:7b:b0:af:59:8a:fb:41:22:53:01:d1:
30:76:57:da:f4:83:e0:a9:cc:44:d5:b4:30:6b:2f:
9a:f6:6f:0c:d7:2c:c7:77:84:c2:05:c6:8f:72:c4:
f0:19:51:da:37:7e:39:45:b4:a3:4e:6d:86:26:20:
ef:a5:75:fd:93:59:72:de:47:04:ef:a6:3b:f3:61:
a1:ad:83:88:d6:59:84:47:b7:43:29:1d:71:78:35:
33:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:93:0B:7D:38:0A:E4:8A:7B:61:B8:E1:14:B0:77:1A:B3:1A:1A:41
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/EZMLfTgK5Ip7YbjhFLB3GrMaGkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.75.176.0/22
Signature Algorithm: sha256WithRSAEncryption
53:65:de:b8:5c:07:02:e9:50:bb:92:ff:ca:9e:db:55:3f:22:
2e:5e:61:90:e7:07:47:55:d1:4d:f4:f4:c4:db:65:1e:da:0f:
7e:23:cf:0d:81:2a:6e:fc:0f:9b:a1:56:60:08:a5:fe:64:98:
44:33:6a:fc:df:47:d5:0d:b7:5a:5c:d3:54:08:03:af:cf:e6:
80:8c:69:0a:8c:e9:db:ac:25:5d:ab:ae:1d:12:7f:71:01:70:
86:f1:67:4a:12:72:0d:2e:a2:3e:1c:11:bf:66:7f:c8:09:e7:
65:ae:1e:d0:64:b2:81:ae:d5:3d:69:75:72:58:3d:1c:12:c6:
8e:ec:86:eb:c3:c7:5f:45:4f:79:65:64:77:80:ef:d1:eb:b1:
b0:b7:ca:09:c0:80:3f:17:29:68:92:95:4c:d2:bc:b3:93:f4:
02:83:31:84:37:e8:32:78:5e:53:c4:18:d3:4a:2a:17:5b:2f:
28:69:15:b5:34:ad:82:e9:a0:bb:c8:ae:41:1a:54:dc:34:60:
00:61:9b:10:12:c7:7e:85:ed:c7:1c:71:d1:fa:3d:45:ab:f2:
51:e6:8e:69:e5:7c:0d:b0:d4:3c:03:c0:53:cd:51:3a:68:aa:
e8:b8:a3:96:75:01:5c:d6:08:99:b9:52:5a:a0:24:53:ad:0d:
51:8c:c8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:56:10 2024 by rpki-client on console-fra.rpki-client.org